Microsoft Edge Information Disclosure Vulnerability
CVE-2024-30056

5.4MEDIUM

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
25 May 2024

Badges

๐Ÿ‘พ Exploit Exists๐Ÿ“ฐ News Worthy

What is CVE-2024-30056?

The vulnerability CVE-2024-30056 is an information disclosure vulnerability in Microsoft Edge, a Chromium-based web browser. The vulnerability allows unauthorized actors to access private user information, potentially posing a risk to data privacy and security. A Proof-of-Concept (PoC) exploit has been released, demonstrating the feasibility of unauthorized access to private user information. Microsoft has rated the severity of the vulnerability as "Important" with a CVSS score of 7.1 out of 10. The company is working on a patch to address the issue, but in the meantime, users are urged to exercise caution when browsing the web and ensure their browser is updated to the latest version as soon as a fix becomes available. It is important for users to stay informed, apply security patches, and exercise caution when interacting with untrusted sources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Microsoft Edge (Chromium-based) Unknown 1.0.0 < 124.0.2478.109

News Articles

PoC Exploit Released for Microsoft Edge Information Disclosure Vulnerability

Cybersecurity researchers have released a Proof-of-Concept (PoC) exploit for a recently disclosed disclosure Microsoft Edge vulnerability.

References

EPSS Score

9% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • ๐Ÿ‘พ

    Exploit known to exist

  • ๐Ÿ“ฐ

    First article discovered by CybersecurityNews

  • Vulnerability published

  • Vulnerability Reserved

.